This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/i97cNeb8oKq1iXS4wbPlLnkqnXM.roa File: i97cNeb8oKq1iXS4wbPlLnkqnXM.roa (raw, json) Hash identifier: tnxwmRHEGHKiP3jVd9g9eR9Y1YnQOfRk5Mq17tUDcaY= Subject key identifier: 8B:DE:DC:35:E6:FC:A0:AA:B5:89:74:B8:C1:B3:E5:2E:79:2A:9D:73 Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Certificate serial: 019B7DCA6E78225AA171D7B18B90FCD3F0C4 Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/i97cNeb8oKq1iXS4wbPlLnkqnXM.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 95.142.113.0/24 maxlen: 24 95.142.116.0/24 maxlen: 24 95.142.119.0/24 maxlen: 24 95.142.122.0/24 maxlen: 24 95.142.123.0/24 maxlen: 24 185.54.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6e:78:22:5a:a1:71:d7:b1:8b:90:fc:d3:f0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bdedc35e6fca0aab58974b8c1b3e52e792a9d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:4d:01:51:62:e9:49:15:b6:01:af:25:21: 14:8d:14:9e:1c:91:fd:52:63:33:ce:36:e9:52:c2: 2f:3a:dc:a8:07:40:8b:ef:93:8a:f8:35:2f:aa:78: 33:d3:31:90:4a:5e:95:95:19:f7:58:9f:a1:15:dc: fb:af:47:92:c6:e0:23:ba:92:40:df:87:bc:80:d7: ab:5d:30:a8:8a:78:af:a4:b7:f2:ba:9b:c0:8c:6f: 7c:f5:f2:05:1c:40:9c:91:04:2d:f8:dd:da:b8:86: 73:f6:8d:0d:62:74:44:fa:4f:14:eb:f8:78:fa:b4: 79:dc:52:40:4a:be:c1:1c:8b:90:2c:51:93:a7:81: 99:dd:8e:4a:21:1f:6c:ce:69:7f:09:10:b7:0e:ad: 54:ad:60:18:ee:c8:f0:35:67:74:b0:45:28:74:14: b0:fa:b6:a6:64:ac:29:ba:f7:6a:41:1d:d0:23:95: ef:93:66:1b:56:01:80:a9:2c:71:b2:3d:58:b1:c1: 8a:83:db:e6:f1:c4:c1:1e:35:f6:1b:29:1c:3b:5c: 04:63:78:aa:12:e3:14:ac:c0:9d:b2:4d:aa:ba:53: 81:08:f4:b1:ea:9a:51:5a:db:01:ad:ff:26:5f:70: 56:21:f5:14:2b:ab:29:bd:e7:fa:17:d8:65:2b:30: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DE:DC:35:E6:FC:A0:AA:B5:89:74:B8:C1:B3:E5:2E:79:2A:9D:73 X509v3 Authority Key Identifier: keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/i97cNeb8oKq1iXS4wbPlLnkqnXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.113.0/24 95.142.116.0/24 95.142.119.0/24 95.142.122.0/23 185.54.230.0/24 Signature Algorithm: sha256WithRSAEncryption 13:5e:29:37:4e:32:2d:69:dc:42:03:bb:eb:9e:f8:4b:d6:ec: c2:a2:52:19:c8:e0:10:86:e7:3d:7b:4f:93:63:5c:17:b5:1d: 16:c4:6b:c5:48:7c:cb:30:7e:96:06:06:26:bf:6d:2d:be:e7: 97:48:06:9d:9b:59:a7:68:1c:72:dc:67:8f:e1:d8:8a:c8:15: b2:b6:87:9c:d1:37:72:35:d9:2e:d3:c9:e4:47:68:88:59:2a: c4:6b:8c:6f:a2:29:07:40:7f:ba:05:d0:62:4f:67:d9:b8:b9: 1f:0c:d7:37:90:d2:a0:98:92:d6:8e:84:bb:66:70:21:3f:33: 81:14:d6:64:c7:94:97:fe:d7:53:01:08:8b:5f:82:8a:47:a1: 20:64:4d:a4:a6:e3:96:40:07:97:c9:24:2e:61:52:17:b1:3e: 6c:fe:e2:46:05:00:55:4d:02:87:47:b5:92:4a:18:a4:20:49: e8:13:9f:fc:c3:cb:1a:0b:c7:fb:3e:f8:d0:2c:05:d9:c4:07: c3:86:4d:fa:53:e3:08:41:a7:29:4b:fe:1d:c5:ad:9f:c7:22: fa:d0:fe:b8:60:fd:c1:d8:e6:48:25:bf:c4:ab:d3:78:db:1f: 52:78:74:6d:be:a2:46:38:a6:0e:5f:af:fa:92:32:1c:86:9a: 68:ee:ec:a7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9ym54Ilqhcdexi5D80/DEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3 OTljODUwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmRlZGMzNWU2ZmNhMGFhYjU4OTc0YjhjMWIzZTUyZTc5MmE5ZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ExNAVFi6UkVtgGvJSEUjRSeHJH9 UmMzzjbpUsIvOtyoB0CL75OK+DUvqngz0zGQSl6VlRn3WJ+hFdz7r0eSxuAjupJA 34e8gNerXTCoinivpLfyupvAjG989fIFHECckQQt+N3auIZz9o0NYnRE+k8U6/h4 +rR53FJASr7BHIuQLFGTp4GZ3Y5KIR9szml/CRC3Dq1UrWAY7sjwNWd0sEUodBSw +ramZKwpuvdqQR3QI5Xvk2YbVgGAqSxxsj1YscGKg9vm8cTBHjX2GykcO1wEY3iq EuMUrMCdsk2qulOBCPSx6ppRWtsBrf8mX3BWIfUUK6spvef6F9hlKzDwfwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIve3DXm/KCqtYl0uMGz5S55Kp1zMB8GA1UdIwQY MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt MDFjYmZjMGU5NGU3LzEvaTk3Y05lYjhvS3ExaVhTNHdiUGxMbmtxblhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3 LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAX45xAwQA X450AwQAX453AwQBX456AwQAuTbmMA0GCSqGSIb3DQEBCwUAA4IBAQATXik3TjIt adxCA7vrnvhL1uzColIZyOAQhuc9e0+TY1wXtR0WxGvFSHzLMH6WBgYmv20tvueX SAadm1mnaBxy3GeP4diKyBWytoec0TdyNdku08nkR2iIWSrEa4xvoikHQH+6BdBi T2fZuLkfDNc3kNKgmJLWjoS7ZnAhPzOBFNZkx5SX/tdTAQiLX4KKR6EgZE2kpuOW QAeXySQuYVIXsT5s/uJGBQBVTQKHR7WSShikIEnoE5/8w8saC8f7PvjQLAXZxAfD hk36U+MIQacpS/4dxa2fxyL60P64YP3B2OZIJb/Eq9N42x9SeHRtvqJGOKYOX6/6 kjIchppo7uyn -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:33 2026 by rpki-client